Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTPS on website is misconfigured #79

Open
mcampbell opened this issue Nov 21, 2024 · 0 comments
Open

HTTPS on website is misconfigured #79

mcampbell opened this issue Nov 21, 2024 · 0 comments

Comments

@mcampbell
Copy link

The HTTPS version of the site is evidently misconfigured. My company uses SSL MITM NetSkope as a security product (believe me I rage as much as I can and not get fired over it, but alas), and we can't get to https:// of the site due to the following error:

MismatchCert (Hostname mismatch) Blocked by SSL_HOST_MISMATCH
The destination youmightnotneedjs.com is not reachable.
Contact your IT administrator with the following error:
mode='CLIENT', lname='ips-clear-proxy', rip='<redacted>', rp='443', oip='', op='0', lip='<redacted>, lp='60110', sni='youmightnotneedjs.com', fd='528493', Hostname 'youmightnotneedjs.com' didn't match certificate info, issuer='/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1', subject='/C=US/ST=California/L=San Francisco/O=GitHub, Inc./CN=*.github.com', notbefore='Jun 9 00:00:00 2024 GMT', notafter='Jun 11 23:59:59 2025 GMT', serial='0DC56EA1ED968F53E5BAC9B62253A8F7', altnames='DNS:*.github.com, DNS:github.com'

One of our infosec experts noted:

it's Github's generic cert that's a Digicert one. I really think it's just people not setting up their config properly. All we can recommend when you run into this is to try accessing it over http rather than https, and maybe dropping the site owner a link to the docs https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/troubleshooting-custom-domains-and-github-pages#https-errors

I should note that using the http trick does work fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant